---
title: Configuring PingFederate as a PingAccess token provider
description: To add PingAccess environments to PingCentral, PingFederate must be configured as the token provider. If you have PingFederate and PingAccess environments established, this configuration is likely in place.
component: pingcentral
version: 1.11
page_id: pingcentral:pingcentral_for_iam_administrators:pingcentral_configuring_pf_token_provider
canonical_url: https://docs.pingidentity.com/pingcentral/2.2/pingcentral_for_iam_administrators/pingcentral_configuring_pf_token_provider.html
llms_txt: https://docs.pingidentity.com/pingcentral/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: August 3, 2023
superseded_by: https://docs.pingidentity.com/pingcentral/2.2/pingcentral_for_iam_administrators/pingcentral_configuring_pf_token_provider.html
section_ids:
  about-this-task: About this task
  steps: Steps
---

# Configuring PingFederate as a PingAccess token provider

To add PingAccess environments to PingCentral, PingFederate must be configured as the token provider. If you have PingFederate and PingAccess environments established, this configuration is likely in place.

## About this task

To configure PingFederate as the token provider for PingAccess, the Issuer URL in PingAccess must either match the Base URL in PingFederate, or one of the virtual hosts defined in PingFederate.

## Steps

1. To configure PingFederate as a PingAccess token provider, ensure the PingAccess **Issuer URL** and the PingFederate **Base URL** match.

   If a virtual host is defined in PingFederate, continue to step 3.

2. To locate this information:

   * In PingFederate, to locate the **Base URL** field, go to **System → Protocol Settings → Federation Info**, as shown in the following example.

   ![vea1593387214750](_images/vea1593387214750.jpg)

   * In PingAccess, to locate the **Issuer URL**field, go to **System → Token Provider**.

     |   |                                                                                                      |
     | - | ---------------------------------------------------------------------------------------------------- |
     |   | In some versions of PingAccess, the Issuer URL might exist as separate **Host** and **Port** fields. |

![tlc1593529388921](_images/tlc1593529388921.jpg)

1. If a virtual host is defined in PingFederate, the PingAccess Issuer URL can reference that instead of Base URL. In PingFederate, to locate the virtual host, go the **System → Virtual Host Names** page and review the information in the **Host Domain Name** field.

   ![oct1593529731877](_images/oct1593529731877.jpg)